> JapanHacked_
[Resolved][Severity: Moderate][Misdelivery]

Wakayama City: a public health center sent meeting materials with the names and ages of 414 COVID-19 patients to an unrelated person by mistyping an address

Materials meant for a staff member's personal address went to a third party because the address was wrong. The city has not been able to reach the recipient.

Disclosed

2021-01-25

Organizations involved

1

Leaked or at risk

414

414

Downtime

Unknown

What happened

  1. Around this time, the health center sent meeting materials to a staff member's personal address, but the address was wrong when the request was made, so the mail reached a third party. [1]

  2. Around this time the address error was discovered. At 10:00 the city asked the recipient to delete the mail and contact the city, but there was no reply. [1]

  3. The city sent the same request again, but has not reached the recipient. [1]

The materials sent in error include the names, ages, genders, admission and discharge dates, hospital names, possible infection routes and positive-test dates of 414 patients. The city phoned the people concerned to apologize and will review how it sends mail containing personal data. [1]

Timeline

  1. Started 2021-01-19
  2. Detected 2021-01-20
  3. Disclosed 2021-01-25
  4. 6 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[Name][Gender][Health data]

Organizations involved

Open in organization search

Sources

  1. [1][News]新コロ感染者情報、職員個人メアド宛の送信でミス - 和歌山市Security NEXT · 2021-01-25